AMENDMENTS TO THE CLAIMS 

The following listing of claims will replace all prior 
versions and listings of claims in the application. 

Listing Of Claims 

1. (Currently Amended) An apparatus comprising: 
a plurality of network ports; 

a central processing unit (CPU) interface; and 

a controller to 

send, to the CPU interface, a request to approve 
an association between one of the plurality of network ports and 
a source media access control (MAC) address of a packet received 
on the one of the plurality of network ports when no request to 
approve the association between the one of the plurality of 
network ports and the source MAC address has been sent to the 
CPU interface, and 

send, to the CPU interface, the request -fee 

approve — fefee aooociation between — fefee — ef*e — e£ — the network ports 

and the source MAC address w hen an approval for an association 
between the source MAC address and a different one of the 
plurality of n etwork ports has been received from the CPU 
interface. 
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2. (Currently Amended) The apparatus of claim 1, wherein 
the controller io further to dctcrminc further determines whether 
an association exists between any of thc one of the plurality of 
network ports and the source MAC address. 

3. (Currently Amended) The apparatus of claim 2, further 
comprising! [:] ] a memory to store a forwarding databas e; and^ 

wherein the controller searches a forwarding database 
for the source MAC address to dotorminc when determining whether 
an association exists between any of the one of the plurality of 
network ports and the source MAC address-r — feke — controller — at& 
further — fee — search — a — forwarding — database — §es= — fehe — source — MAG 
address . 

4. (Currently Amended) The apparatus of claim 1, wherein 
the controller is further to dot ermine further determines whether 
no request to approve the association between the one of the 
plurality of network ports and the source MAC address has been 
sent to the CPU interface. 
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5. (Currently Amended) The apparatus of claim 4, wherein 
the controller further determines whether an unapproved 
association between the one of the plurality of network ports 
and the source MAC address exists -? — to determine when determining 
whether no request to approve the association between the one of 
the plurality of network ports and the source MAC address has 
been sent to the CPU interface-; — the — controller — is — further — fee 
determine whether — an unapproved association — between — feke — efte — e# 
the network ports and the source MAC address exists . 

6. (Currently Amended) The apparatus of claim 5, wherein 
the controller determines whether the association between the 
one of the plurality of network ports and the source MAC address 
exists- — fee — determine when determining whether the unapproved 
association between the one of the plurality of network ports 
and the source MAC address exists-? — the controller is further: 

fee — determine whether — fefee — association — between — fefee — eae 
of the network ports and the source MAC address exists ; ^ and 
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wherein the controller determines whether the 
association between the one of the plurality of network ports 
and the source MAC address is approved when the association 
between the one of the plurality of n etwork ports and the source 
MAC address exists-? — to determine whether the aooociation between 
■fcke — eae — e€ — fefee — network — ports — aftd — fefee — source — MAG — address — is 
approved . 

7. (Currently Amended) The apparatus of claim 6, further 
comprising [ [ : ] ] a memory to store a forwarding database ; and ^ 

wherein the controller further searches the forwarding 
database for an entry comprising the source MAC address when 
determining- ; — fee — determine whether the association between the 
one of the plurality of network ports and the source MAC address 

existST feke — controller — ±s — further — fee — ooarch — fefee — forwarding 

database for an entry comprising the source MAC address . 
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8. (Currently Amended) The apparatus of claim 7, wherein 
the controller further determines whether an approval flag is 
set for the entry comprising the source MAC address when 
determining- ? — fee — determine whether the association between the 
one of the plurality of network ports and the source MAC address 
is approved-; — the controller — ins — further — to determine whether an 
approval — flag — is — sefe — §e*= — feke — entry — comprising — fefee — source MAC 
addrooo . 

9. (Currently Amended) The apparatus of claim 1, wherein 
the controller is further to crcato further creates an unapproved 
association between the one of the plurality of network ports 
and the source MAC address. 

10. (Currently Amended) The apparatus of claim 9, wherein 
when creating- ? — fee — create the unapproved association between the 
one of the plurality of network ports and the source MAC 
address- the controller io further : 

■fee — croato creates the association between the one of 
the plurality of network ports and the source MAC address; and 

to mark indicates that the association between the one 
of the plurality of network ports and the source MAC address as 
unapproved . 
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11. (Currently Amended) The apparatus of claim 10, 
further comprising [ [ : ] ] a memory to store a forwarding database^ 

— t 

'CTTTCC / 

wherein the controller further creates an entry in the 
forwarding database when - — fee — crcato creating the association 
between the one of the plurality of network ports and the source 
MAC address compriocs , an d thc controller io further to create an 
entry in the forwarding database, 

wherein the entry identifying identifies the one of 
the plurality of network ports and the source MAC address . 

12. (Currently Amended) The apparatus of claim 11, 
wherei n the controller further sets an approval flag in the 
forwarding database for the entry -? — to mark when indicating that 
the association between the one of the plurality of network 
ports and the source MAC address as unapproved-? — the controller 
is — further — fee — set — an — approval — flag — ana — fefee — forwarding database 
for the entry . 

13. (Currently Amended) The apparatus of claim 12, 
wherein the controller [[is]] further: 
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-fee rcQoivo receives , from the CPU interface, in 

response to the request to approve the association between the 

one of the plurality of network ports and the source MAC 

address, an approval of the association between the one of the 
plurality of network ports and the source MAC address; and 

to cloar clears the approval flag for the entry. 

14. (Currently Amended) The apparatus of claim 12, 
wherein the controller [[is]] further: 

■fee rGccivc receives , from the CPU interface, in 

response to the request to approve the association between the 

one of the plurality of network ports and the source MAC 

address, a disapproval of the association between the one of the 
plurality of network ports and the source MAC address; and 

to dclote deletes the entry. 

15, (Currently Amended) The apparatus of claim 9, wherein 
the controller [[is]] further: 

■fee rocGivc receives , from the CPU interface, in 

response to the request to approve the association between the 

one of the plurality of network ports and the source MAC 

address, an approval of the association between the one of the 
plurality of n etwork ports and the source MAC address; and 
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-fee — approvo approves the unapproved association between 
the one of the plurality of network ports and the source MAC 
address . 

16. (Currently Amended) The apparatus of claim 9, wherein 
the controller [[is]] further: 

•fee — rocQiving receives , from the CPU interface, in 
response to the request to approve the association between the 
one of the plurality of network ports and the source MAC 
address, a disapproval of the association between the one of the 
plurality of network ports and the source MAC address; and 

to doloto deletes the unapproved association between 
the one of the plurality of network ports and the source MAC 
address . 

17. (Currently Amended) The apparatus of claim 1, wherein 
the packet further comprises a destination MAC address, and 

wherein the controller [[is]] further: 

to proccoo processes the packet according to the 
destination MAC address when an association between the 
destination MAC address and a further one of the plurality of 
network ports exists and the association between the destination 
MAC address and the further one of the plurality of network 
ports has been approved; [[and]] 
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to proccss processes the packet without regard to 
the destination MAC address when no association between the 
destination MAC address and any of — feh eone of the plurality of 
network ports exists; and 

to proccss processes the packet without regard to 
the destination MAC address when the association between the 
destination MAC address and the further one of the plurality of 
network ports exists but the association between the destination 
MAC address and the further one of the plurality of network 
ports has not been approved . 

18. (Currently Amended) The apparatus of claim 17 # 
wherein the controller further causes the further one of the 
plurality of network ports to transmit the packet- — to process 
when processing the packet according to the destination MAC 
address-; — the controller — is — further — fee — cause — fehe — further one — 
the network ports to transmit the packet . 
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19. (Currently Amended) The apparatus of claim 17, 
wherein the controller further causes all of the plurality of 
network ports but the one of the plurality of network ports to 
transmit the packet to procooG when processing the packet without 
regard to the destination MAC address, the controller io further 
■fee — cauGQ — all of — the network ports — — fehe — eae — b€ — the network 
ports to transmit the packet . 

20. (Original) An integrated circuit comprising the 
apparatus of claim 1. 

21. (Original) A network switch comprising the apparatus 
of claim 1. 

22. (Original) The network switch of claim 21, wherein 
the network switch is an Ethernet network switch. 

23. (Currently Amended) The network switch of claim 21, 
further comprising [ [ : ] ] a CPU in communicatio n that communicates 
with the CPU interface. 

24. (Currently Amended) An apparatus comprising: 
a plurality of network port moano ports ; 
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central processing unit (CPU) interface means for 
communicating with a CPU ; and 

controller means for sending, to the CPU interface 
means, a request to approve an association between one of the 
plurality of network port moanG ports and a source media access 
control (MAC) address of a packet received on the one of the 
network port — means p orts when no request to approve the 
association between the one of the plurality of network port 
means ports and the source MAC address has been sent to the CPU 
interface means, [[and]] 

wherein the controller means scnding sends , to the CPU 
interface means, the request to approve the — association between 
the — ©Be — ei — fehe — network port means — a»3 — fcfee — source MAC — address 
when an approval for an association between the source MAC 
address and a different one of the plurality of network port 
means ports has been received from the CPU interface means. 

25. (Currently Amended) The apparatus of claim 24, 

wherein the controller means is further §e*? 

dctcrmining determines whether an association exists between any 
— the network port moans one of the plurality of network ports 
and the source MAC address. 
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26. (Currently Amended) The apparatus of claim 25, 
further comprising [[:] ] memory means for storing a forwarding 
databas e; and ^_ 

wherein-? the controller means searches a 

forwarding database for the source MAC address when determining 
whether an association exists between a**y — e£ — fefee — network port 
HteaR gone of the plurality of network ports and the source MAC 

address- fehe — controller — moano — ars — further — £e*e — aoarching — a 

forwarding databaoe for tho oourcc MAC addreoo . 

27, (Currently Amended) The apparatus of claim 24, 

wherein the controller means 4rs further £e*? 

dotermining determines whether no request to approve the 
association between the one of the plurality of network port 
moano ports and the source MAC address has been sent to the CPU 
interface means . 
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28. (Currently Amended) The apparatus of claim 27, 

wherein-? £e*r the controller means determines whether an 

unapproved association between the one of the network ports and 
the source MAC address exists when determining whether no 
request to approve the association between the one of the 
plurality of network port moans p orts and the source MAC address 
has been sent to the CPU interface means-? — the controller moans 
±s — further — §e* — determining — whether — an — unapproved — association 
between the one of — the network port means — and the source MAC 
addrooo exists . 

29. (Currently Amended) The apparatus of claim 28, 
wherein-? — €ea ? when determining whether the unapproved association 
between the one of the plurality of n etwork port mcang p orts and 
the source MAC address exists, the controller means— ins — further 

determining determines whether the association between 
the one of the plurality of network port — mcano p orts and the 
source MAC address exists; and 
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when — fefee — association — between — fcfee — one — &£ — fcfee — network 

port — moans — — fefee — source — MAG — addrcoo — exioto, determining 

determines whether the association between the one of the 
plurality of network port moano ports and the source MAC address 
is approve d when the association between the one of the 
plurality of network ports and the source MAC address exists . 

30. (Currently Amended) The apparatus of claim 29, 
further comprising [ [ : ] ] memory means for storing a forwarding 
da t abas o ; and^ 

wherein-? — ie ^ when determining whether the association 
between the one of the plurality of network port mcans ports and 
the source MAC address exists, the controller means is — further 
— oearching searches the forwarding database for an entry 
comprising the source MAC address. 

31. (Currently Amended) The apparatus of claim 30, 
wherein^ — ge g when determining whether the association between 
the one of the plurality of network port — moano ports and the 
source MAC address is approved, the controller means is further 
-§e*= — dotormining determines whether an approval flag is set for 
the entry comprising the source MAC address. 
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32. (Currently Amended) The apparatus of claim 24, 
wherein the controller means is — further — — crcating creates an 
unapproved association between the one of the plurality of 
network port ports and the source MAC address . 

33. (Currently Amended) The apparatus of claim 32, 
wherein-; — §e ^ when creating the unapproved association between 
the one of the plurality of network port — mcano ports and the 
source MAC address, the controller means is further for : 

creating — creates the association between the one of 

the plurality of network port — mcano ports and the source MAC 
address ; and 

marking indicates the association between the one of 

the plurality of network port — moana ports and the source MAC 
address as unapproved. 

34. (Currently Amended) The apparatus of claim 33, 
further comprising [[:] ] memory means for storing a forwarding 
databas e; and , 
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wherein-? — £e* r when creating the association between the 
one of the plurality of network port mcans ports and the source 
MAC address — comprises, the controller means is — further — 
croatin g creates an entry in the forwarding database^ — tho ontry 
identifying that identifies the one of the plurality of network 
port mcano ports and the source MAC address, 

35. (Currently Amended) The apparatus of claim 34, 
wherein-? — for marking the controller means sets an approval flag 
in the forwarding database for the entry when indicating the 
association between the one of the plurality of network port 

mcano ports and the source MAC address as unapproved-? fefee 

controller moans is further for Getting an approval flag in tho 
forwarding database for the entry . 

36. {Currently Amended) The apparatus of claim 35, 
wherein the controller means is further for ; 

receiving, receives from the CPU interface means [ [ , ] ] 
an approval of the association between the one of the plurality 
of network ports and the source MAC address in response to the 
request to approve the association between the one of the 
plurality of network port mcano p orts and the source MAC address-r 
aft — approval — b€ — fefee — association between — fefee — ©Re — — tho network 
port means and tho source MAC address ; and 
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clearing clears the approval flag for the entry. 



37. (Currently Amended) The apparatus of claim 35, 
wherein the controller means is further for : 

receiving, receives from the CPU interface means [ [ , ] ] a 
disapproval of the association between the one of the plurality 
of network ports and the source MAC address in response to the 
request to approve the association between the one of the 
plurality of network port mcano ports and the source MAC address, 
a disapproval of the association between the one of — the network 
port means and the source MAC address ; and 

deleting deletes the entry. 

38. (Currently Amended) The apparatus of claim 32, 
wherein the controller means is further for : 

receiving, receives from the CPU interface means [ [ , ] ] an 
approval of the association between the one of the plurality of 
network ports and the source MAC address in response to the 
request to approve the association between the one of the 
plurality of n etwork port mcans ports and the source MAC address-r 
aft — approval — e€ — fehe — association between — fefee — ene — b€ — fefee — network 
port moans and the source MAC address ; and 



Serial No. 10/761,879 



Page 18 of 43 



approving approves the unapproved association between 
the one of the plurality of network port — moans ports and the 
source MAC address. 

39. (Currently Amended) The apparatus of claim 32, 
wherein the controller means is further for : 

receiving, receives from the CPU interface means [ [ , ] J 
a disapproval of the association between the one of the 
plurality of network ports and the source MAC address in 
response to the request to approve the association between the 
one of the plurality of network port moano ports and the source 
MAC address- — a disapproval of the association between the one of 
the network port means and the oourcc MAC address ; and 

deleting — deletes the unapproved association between 
the one of the plurality of network port — mcanG ports and the 
source MAC address . 

40. (Currently Amended) The apparatus of claim 24, 
wherein the packet further comprises a destination MAC address, 
and 

wherein the controller means is further for : 



Serial No. 10/761,879 



Page 19 of 43 



processing processes the packet according to the 
destination MAC address when an association between the 
destination MAC address and a further one of the plurality of 
network port mcans ports exists and the association between the 
destination MAC address and the further one of the plurality of 
network port moano ports has been approved; [[and]] 

processing p rocesses the packet without regard to 
the destination MAC address when no association between the 
destination MAC address and any of — fche— one of the plurality of 
network port moano ports exists; and 

processing processes the packet without regard to 
the destination MAC address when the association between the 
destination MAC address and the further one of the plurality of 
network port mcans ports exists but the association between the 
destination MAC address and the further one of the plurality of 
network port moanG ports has not been approved. 

41. (Currently Amended) The apparatus of claim 40, 
wherein-? — £e g the controller means causes the further one of the 
plurality of network ports to transmit the packet when 
processing the packet according to the destination MAC address- 
the control lor moans — is — further — for causing the — further one of 
the network port moans to transmit the packet . 
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42. (Currently Amended) The apparatus of claim 40, 
wherein-^ — gpg the controller means causes all of the plurality of 
network ports but the one of the plurality of network ports to 
transmit the packet when processing the packet without regard to 
the destination MAC address-? — the controller mcano ia further for 
causing all of the network port means but tho one of the network 
port means to transmit the packet . 

43. (Original) An integrated circuit comprising the 
apparatus of claim 24. 

44. (Original) A network switch comprising the apparatus 
of claim 24. 

45. (Original) The network switch of claim 44 , wherein 
the network switch is an Ethernet network switch. 

46. (Currently Amended) The network switch of claim 44, 

further comprising [ [ : ] ] CPU means communicatio n f or 

communicating with the CPU interface means. 

47. (Currently Amended) A method for a switch comprising 
a plurality of network ports and a central processing unit (CPU) 
interface , the method comprising : 
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receiving, on one of the plurality of network ports, a 
packet comprising a source media access control (MAC) address; 

sending, to the CPU interface, a request to approve an 
association between the one of the plurality of network ports 
and the source MAC address when no request to approve the 
association between the one of the plurality of network ports 
and the source MAC address has been sent to the CPU interface; 
and 

sending, to the CPU interface, the request to approve 

■fefee aooociation — between — fcke — eae — e£ — fcfee — network — porta — aft€t — fcfee 

source — MAG — address — when an association between the source MAC 
address and a different one of the plurality of network ports 
has been approved. 

48* (Currently Amended) The method of claim 47, further 

comprising [ [ : ] ] determining whether an association exists 

between any of the one of the plurality of network ports and the 
source MAC address . 

49. (Currently Amended) The method of claim 48, wherein 
the determining of whether an association exists between any of 
•fetie — one of the plurality of network ports and the source MAC 
address comprises [[:] ] searching a forwarding database for the 
source MAC address . 
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50. (Currently Amended) The method of claim 47, further 
comprising [ [ : ] ] determining whether no request to approve the 
association between the one of the plurality of network ports 
and the source MAC address has been sent to the CPU interface. 

51. (Currently Amended) The method of claim 50 , wherein 
the determining of w hether no request to approve the association 
between the one of the plurality of network ports and the source 
MAC address has been sent to the CPU interface comprises [ t : ] ] 
determining whether an unapproved association between the one of 
the plurality of network ports and the source MAC address 
exists . 

52. (Currently Amended) The method of claim 51, wherein 
the determining of whether the unapproved association between 
the one of the plurali ty of network ports and the source MAC 
address exists comprises: 

determining whether the association between the one of 
the plurality of network ports and the source MAC address 
exists? and 
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when — fcke — association — between — fefee — one — oi — fcfee — network 
ports and the source MAC address exists, — determining whether the 
association between the one of the plurality of network ports 
and the source MAC address is approved when the association 
between the one of the plurality of network ports and the source 
MAC address exists . 

53. (Currently Amended) The method of claim 52, wherein 
the determining of whether the association between the one of 
the plurality of network ports and the source MAC address exists 
comprises [ [ : ] ] searching a forwarding database for an entry 
comprising the source MAC address. 

54. (Currently Amended) The method of claim 53, wherein 
the determining of w hether the association between the one of 
the plurality of n etwork ports and the source MAC address is 
approved comprises [[:] ] determining whether an approval flag is 
set for the entry comprising the source MAC address. 

55. (Currently Amended) The method of claim 47, further 
comprising: 

creating an unapproved association between the one of 
the plurality of network ports and the source MAC address . 
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56. (Currently Amended) The method of claim 55, wherein 
the creating of the unapproved association between the one of 
the plurality of network ports and the source MAC address 
comprises : 

creating the association between the one of the 
plurality of network ports and the source MAC address; and 

marking indicating the association between the one of 
the plurality of network ports and the source MAC address as 
unapproved . 

57. (Currently Amended) The method of claim 56, wherein 
the creating of the association between the one of the plurality 

of network ports and the source MAC address comprises [ [ : ] ] 

creating an entry in a forwarding database, the entry 
identifying the one of the plurality of network ports and the 
source MAC address . 

58. (Currently Amended) The method of claim 57, wherein 
the m arking indicating of the association between the one of the 
plurality of n etwork ports and the source MAC address as 
unapproved comprises [ [ : ] ] setting an approval flag for the 
entry. 
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59. (Currently Amended) The method of claim 58, further 
comprising: 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of n etwork ports and the source MAC address, an 
approval of the association between the one of the plurality of 
network ports and the source MAC address; and 

clearing the approval flag for the entry. 

60. (Currently Amended) The method of claim 58, further 
comprising: 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, a 
disapproval of the association between the one of the plurality 
of network ports and the source MAC address; and 

deleting the entry. 

61. (Currently Amended) The method of claim 55, further 
comprising : 
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receiving, from the CPU interface, in response to the 

request to approve the association between the one of the 

plurality of network ports and the source MAC address, an 
approval of the association between the one of the plurality of 
network ports and the source MAC address; and 

approving the unapproved association between the one 
of the plurality of network ports and the source MAC address. 

62. (Currently Amended) The method of claim 55, further 
comprising: 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, a 
disapproval of the association between the one of the plurality 
of n etwork ports and the source MAC address; and 

deleting the unapproved association between the one of 
the plurality of network ports and the source MAC address . 

63. (Currently Amended) The method of claim 47, wherein 
the packet further comprises a destination MAC address, and 

wherein the method further comprising comprises : 
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processing the packet according to the 
destination MAC address when an association between the 
destination MAC address and a further one of the plurality of 
network ports exists and the association between the destination 
MAC address and the further one of the plurality of network 
ports has been approved; [[and]] 

processing the packet without regard to the 
destination MAC address when no association between the 
destination MAC address and any of — fefee one of the plurality of 
network ports exists; and 

processing the packet without regard to the 
destination MAC address when the association between the 
destination MAC address and the further one of the plurality of 
network ports exists but the association between the destination 
MAC address and the further one of the plurality of network 
ports has not been approved, 

64. (Currently Amended) The method of claim 63, wherein 
the processing of the packet according to the destination MAC 
address comprises [[:] ] transmitting the packet from the further 
one of the plurality of network ports . 
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65. (Currently Amended) The method of claim 63, wherein 
the processing of the packet without regard to the destination 
MAC address comprises [[:] ] transmitting the packet from all of 
the plurality of network ports but the one of the plurality of 
network ports. 

66. (Currently Amended) A computer readable medium that 
stores a computer program embodying instructions executable by a 
computer for a switch comprising a plurality of network ports 
and a central processing unit (CPU) interface, the computer 
program comprising instructions for : 

receiving, on one of the plurality of network ports, a 
packet comprising a source media access control (MAC) address; 

sending, to the CPU interface, a request to approve an 
association between the one of the plurality of network ports 
and the source MAC address when no request to approve the 
association between the one of the plurality of network ports 
and the source MAC address has been sent to the CPU interface; 
and 

sending, to the CPU interface, the request to approve 

-fcke association between — fefee — ene — e£ — the network porta — afid — the 

source — MAG — address — when an association between the source MAC 
address and a different one of the plurality of network ports 
has been approved. 
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67. (Currently Amended) The computer program — readable 
medium of claim 66, further comprising instructions for [[:]] 
determining whether an association exists between any of tho one 
of the plurality of network ports and the source MAC address. 

68. (Currently Amended) The computer readable 
medium program of claim 67, wherein the instructions for 
determining of whether an association exists between afty — e# 
•frh eone of the plurality of network ports and the source MAC 
address comprises [ [ : ] ] instructions for searching a forwarding 
database for the source MAC address. 

69. (Currently Amended) The computer program — readable 
medium of claim 66, further comprising [ [ : ] ] instructions for 
determining whether no request to approve the association 
between the one of the plurality of network ports and the source 
MAC address has been sent to the CPU interface. 
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70. (Currently Amended) The computer program — readable 
medium of claim 69, wherein the instructions for determining of 
whether no request to approve the association between the one of 
the plurality of network ports and the source MAC address has 
been sent to the CPU interface comprises [[:] ] instructions for 
determining whether an unapproved association between the one of 
the plurality of network ports and the source MAC address 
exists . 

71. (Currently Amended) The computer program — readable 
medium of claim 70, wherein the instructions for determining of 
whether the unapproved association between the one of the 
plurality of network ports and the source MAC address exists 
comprises instructions for : 

determining whether the association between the one of 
the plurality of network ports and the source MAC address 
exists ; and 

determining whether the association between the one of 
the plurality of network ports and the source MAC address is 
approved when the association between the one of the plurality 
of network ports and the source MAC address exists-; — determining 
whether the association between the one of tho network porto and 
the source MAC address is approved . 
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72. (Currently Amended) The computer program — readable 
medium of claim 71, wherein the instructions for determining of 
whether the association between the one of the plurality of 
network ports and the source MAC address exists comprises [[:] ] 
instructions for searching a forwarding database for an entry 
comprising the source MAC address. 

73. (Currently Amended) The computer program — readable 
medium of claim 72, wherein the instructions for determining of 
whether the association between the one of the plurality of 
network ports and the source MAC address is approved 
comprises [ [ : ] ] instructions for determining whether an approval 
flag is set for the entry comprising the source MAC address. 

74. (Currently Amended) The computer program — readable 
medium of claim 66, further comprising [ [ : ] ] instructions for 
creating an unapproved association between the one of the 
plurality of network ports and the source MAC address . 

75. (Currently Amended) The computer program — readable 
medium of claim 74, wherein the instructions for creating of the 
unapproved association between the one of the plurality of 
network ports and the source MAC address comprises instructions 
for: 



Serial No. 10/761,879 



Page 32 of 43 



creating the association between the one of the 
plurality of network ports and the source MAC address; and 

marking indicating the association between the one of 
the plurality of network ports and the source MAC address as 
unapproved . 

76. {Currently Amended) The computer program — readable 
medium of claim 75, wherein the instructions for creating of the 
association between the one of the plurality of network ports 
and the source MAC address comprises [ [ : ] ] instructions for 
creating an entry in a forwarding database, the entry 
identifying the one of the plurality of n etwork ports and the 
source MAC address. 

77. (Currently Amended) The computer program — readable 
medium of claim 76, wherein the instructions for m arking 
indicating of the association between the one of the plurality 
of n etwork ports and the source MAC address as unapproved 
comprises [[:] ] instructions for setting an approval flag for the 
entry. 

78. (Currently Amended) The computer program — readable 
medium of claim 77, further comprisin g instructions for : 
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receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, an 
approval of the association between the one of the plurality of 
network ports and the source MAC address; and 

clearing the approval flag for the entry, 

79. (Currently Amended) The computer program — readable 
medium of claim 77, further comprising instructions for : 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, a 
disapproval of the association between the one of the plurality 
of network ports and the source MAC address; and 

deleting the entry. 

80. (Currently Amended) The computer program — readable 
medium of claim 74, further comprising instructions for : 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, an 
approval of the association between the one of the plurality of 
network ports and the source MAC address; and 
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approving the unapproved association between the one 
of the plurality of network ports and the source MAC address. 

81. (Currently Amended) The computer program — readable 
medium of claim 74, further comprisin g instructions for : 

receiving, from the CPU interface, in response to the 
request to approve the association between the one of the 
plurality of network ports and the source MAC address, a 
disapproval of the association between the one of the plurality 
of network ports and the source MAC address; and 

deleting the unapproved association between the one of 
the plurality of network ports and the source MAC address. 

82. (Currently Amended) The computer program — readable 
medium of claim 66, wherein the packet further comprises a 
destination MAC address, and wherein the computer program 
further comprioing comprises instructions for : 

processing the packet according to the destination MAC 
address when an association between the destination MAC address 
and a further one of the plurality of network ports exists and 
the association between the destination MAC address and the 
further one of the plurality of network ports has been approved; 
[[and]] 
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processing the packet without regard to the 
destination MAC address when no association between the 
destination MAC address and any of — fefe eone of the plurality of 
network ports exists; and 

processing the packet without regard to the 
destination MAC address when the association between the 
destination MAC address and the further one of the plurality of 
network ports exists but the association between the destination 
MAC address and the further one of the plurality of n etwork 
ports has not been approved. 

83. (Currently Amended) The computer program — readable 
medium of claim 82, wherein the instructions for processing of 
the packet according to the destination MAC address 
comprises [[:] ] instructions for transmitting the packet from the 
further one of the plurality of network ports. 

84. (Currently Amended) The computer program — readable 
medium of claim 82, wherein the instructions for processing of 
the packet without regard to the destination MAC address 
comprises [[:] ] instructions for transmitting the packet from all 
of the plural i ty of network ports but the one of the plurality 
of network ports. 
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